QuestionScout & GDPR
Is QuestionScout GDPR ready?
Yes, QuestionScout is GDPR ready! We’re also committed to helping our customers prepare for the EU General Data Protection Regulation (GDPR).
Does it affect me / my business?
If you hold or process the data of an any person in the EU, the GDPR will most likely apply to you, whether you’re based in the EU or not.
Must data be stored in the EU to be GDPR Compliant?
No, this is a common misconception. While there are parts of regulation that apply to the transfer of data across regions, there is no requirement for data be stored in the EU.
What is GDPR?
GDPR (the European General Data Protection Regulation) is a set of rules designed to give you more rights and control over the personal data of EU Citizens. When a company has information that can directly or indirectly be identified with you, you have rights over what happens to that data specifically.
Where can I find your Data Processing Agreement?
Of particular importance for our EU customers, we have included a Data Processing Agreement into the general Terms and Conditions. View the DPA here.
What is 'Personal Data'?
Personal Data can be lots things. It could be your name, location data, ID number or any other identifier, as long as it can be directly associated with you.
Whether you've responded to a QuestionScout form, or if you've created one, you have multiple rights included in GDPR:
- The right of access
- The right to rectification
- The right to erasure (right to be forgotten)
- The right to data portability
- The right to object
- The right to restriction of processing
You can exercise these rights directly with the person, organisation or business which created the QuestionScout form. If you aren't able to get in touch with the creator of a QuestionScout form, we can help you to get in touch with them. Contact us if you need our help.
I have sent my personal information through a QuestionScout form.
If you have sent your personal information through a QuestionScout form, and you want to exercise your GDPR rights, we recommend you to directly contact the individual, organisation or business that has created the QuestionScout form. If you're unable to do this, you can contact us and we will do everything we can to put you in touch with the creator of the form.
I’m a QuestionScout user and I collect personal information with my forms, surveys or questionnaires.
As our privacy policy states, you are responsible for the data you collect with any of your forms, surveys or questionnaires created by you, your organisation or your business, as well as having the rights to use this data.
As the GDPR requires, you must ask your respondent for consent of collecting and storing personal data. You can do this by using a single-choice field with two options to give or not give you consent to use their data, for example.
If we get a data request from someone who has sent their personal information through one of your QuestionScout forms, surveys or questionnaires, we'll provide you with their contact information, as it's your legal responsibility to process this.
I’m a QuestionScout user and I want to exercise my GDPR rights.
If you want to exercise one of the following GDPR rights:
The right to access the data you store about me
Please contact us if you want to exercise this right, and we'll be more than happy to send you all of the information we store about you.
The right to rectify the data you store about me
You can manage all of your account details from your account settings, including all of your billing details.
The right to erasure (right to be forgotten)
If you wish to cancel your account, you can do that from your account page. Once you've deleted your QuestionScout account, all forms, surveys, questionnaires and responses are permanently deleted and can never be recovered. If you only want all of your data to be erased, please get in touch with us.
The right to data portability
You can currently export all data, responses and other results from the responses tab on your forms.
The right to object
Please contact us if you want to exercise your right to object data we store about you.